111 lines
2.6 KiB
Jsonnet
111 lines
2.6 KiB
Jsonnet
local ingress(name, namespace, rules) = {
|
|
apiVersion: 'extensions/v1beta1',
|
|
kind: 'Ingress',
|
|
metadata: {
|
|
name: name,
|
|
namespace: namespace,
|
|
annotations: {
|
|
'nginx.ingress.kubernetes.io/auth-type': 'basic',
|
|
'nginx.ingress.kubernetes.io/auth-secret': 'basic-auth',
|
|
'nginx.ingress.kubernetes.io/auth-realm': 'Authentication Required',
|
|
},
|
|
},
|
|
spec: { rules: rules },
|
|
};
|
|
|
|
local kp =
|
|
(import 'kube-prometheus/kube-prometheus.libsonnet') +
|
|
{
|
|
_config+:: {
|
|
namespace: 'monitoring',
|
|
grafana+:: {
|
|
config+: {
|
|
sections+: {
|
|
server+: {
|
|
root_url: 'http://grafana.example.com/',
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
// Configure External URL's per application
|
|
alertmanager+:: {
|
|
alertmanager+: {
|
|
spec+: {
|
|
externalUrl: 'http://alertmanager.example.com',
|
|
},
|
|
},
|
|
},
|
|
prometheus+:: {
|
|
prometheus+: {
|
|
spec+: {
|
|
externalUrl: 'http://prometheus.example.com',
|
|
},
|
|
},
|
|
},
|
|
// Create ingress objects per application
|
|
ingress+:: {
|
|
'alertmanager-main': ingress(
|
|
'alertmanager-main',
|
|
$._config.namespace,
|
|
[{
|
|
host: 'alertmanager.example.com',
|
|
http: {
|
|
paths: [{
|
|
backend: {
|
|
serviceName: 'alertmanager-main',
|
|
servicePort: 'web',
|
|
},
|
|
}],
|
|
},
|
|
}]
|
|
),
|
|
grafana: ingress(
|
|
'grafana',
|
|
$._config.namespace,
|
|
[{
|
|
host: 'grafana.example.com',
|
|
http: {
|
|
paths: [{
|
|
backend: {
|
|
serviceName: 'grafana',
|
|
servicePort: 'http',
|
|
},
|
|
}],
|
|
},
|
|
}],
|
|
),
|
|
'prometheus-k8s': ingress(
|
|
'prometheus-k8s',
|
|
$._config.namespace,
|
|
[{
|
|
host: 'prometheus.example.com',
|
|
http: {
|
|
paths: [{
|
|
backend: {
|
|
serviceName: 'prometheus-k8s',
|
|
servicePort: 'web',
|
|
},
|
|
}],
|
|
},
|
|
}],
|
|
),
|
|
},
|
|
} + {
|
|
// Create basic auth secret - replace 'auth' file with your own
|
|
ingress+:: {
|
|
'basic-auth-secret': {
|
|
apiVersion: 'v1',
|
|
kind: 'Secret',
|
|
metadata: {
|
|
name: 'basic-auth',
|
|
namespace: $._config.namespace,
|
|
},
|
|
data: { auth: std.base64(importstr 'auth') },
|
|
type: 'Opaque',
|
|
},
|
|
},
|
|
};
|
|
|
|
{ [name + '-ingress']: kp.ingress[name] for name in std.objectFields(kp.ingress) }
|